Some vulnerabilities have been reported in VLC Media Player, which potentially can be exploited by malicious people to compromise a user's system.

1) An error within the ActiveX plugin of VLC Media Player can be exploited to overwrite certain memory zones and execute arbitrary code when a user e.g. visits a malicious website.

Note: This affects the Windows versions only.

2) Some vulnerabilities are caused due to the use of a vulnerable version of the FLAC library, which contains multiple integer overflows.

For more information:
SA27210

Note: This may affect the Windows and Mac OS X binaries only.

Solution
Update to version 0.8.6d.
Further details available to Secunia VIM customers

Provided and/or discovered by
1) The vendor credits Ricardo Narvaja (Ricnar), Core Security Technologies.
2) Originally reported in FLAC by Sean de Regge via iDefense Labs and Greg Linares, eEye Digital Security.

Changelog
Further details available to Secunia VIM customers

Original Advisory
VLC:
http://www.videolan.org/sa0703.html
http://www.videolan.org/developers/vlc/NEWS

CORE-2007-1004:
http://www.coresecurity.com/?action=item&id=2035

Other references
Further details available to Secunia VIM customers

Deep Links
Links available to Secunia VIM customers